Doctor Around Telemedicine Premium Authentication Bypass Info Disclosure

The vulnerability of the “Doctor Around. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

Doctor Near Telemedicine Premium Authentication Bypass

The vulnerability of the “Doctor Near. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Insecure Password Reset Mechanism → Full Admin Account Takeover Plaintext Password Reset Keys Stored in Database + SQL Injection = Complete Admin Takeover 📋 Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-5076 Plugin| ARMember – Membership...

Bili-cracker

Obtain bilibili Premium Membership via CVE-2026-350234 Vulnerability...

CVE-2025-7401

CVE-2025-7401 Premium Age Verification / Restriction for WordPress = 3.0.2 - Unauthenticated Arbitrary File Read and Write 🧾 Premium Age Verification / Restriction for WordPress = 3.0.2 — Unauthenticated Arbitrary File Read & Write 📝 Description The "Premium Age Verification / Restriction for...

CVE-2024-48392-PoC

CVE-2024-48392 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-48392, an XSS vulnerability discovered in Orangescrum self-hosted as well as the premium version. CVE ID: CVE-2024-48392...

cryptoquant-key-gen

CryptoQuant Breaker v1.6 — 2026 Unlock CryptoQuant Premium Features | Advanced Analytics & Real-Time Data Access Description CryptoQuant Breaker is a powerful patcher utility designed to bypass CryptoQuant's advanced analytics tier restrictions and real-time data limits. Get unlimited access to...

CVE-2025-24659

CVE-2025-24659 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Premium Packages – Sell Digital Products Securely Vulnerable version Since the Premium Packages plugin is an addon...

telegram-phish-simulator

⚠️ Telegram Phishing Simulator – Educational Security Tool DO NOT USE THIS CODE FOR ILLEGAL ACTIVITIES. This repository is a simulation built for cybersecurity education, awareness, and authorized lab-based testing only. 📚 Table of Contents About Contents Safe Lab Setup How to Run Simulated Attack...

WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting

WordPress Hero Maps Premium plugin 2.2.1 and prior contains an unauthenticated reflected cross-site scripting vulnerability via the views/dashboard/index.php p parameter. id: CVE-2019-19134 info: name: WordPress Hero Maps Premium =2.2.2 or apply the vendor-provided patch to fix the XSS...

WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'armdirectorypagingaction' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-supplied 'order' and 'orderby' parameters and the lack of...

Premium Packages – Sell Digital Products Securely - SQL Injection

Premium Packages – Sell Digital Products Securely WordPress plugin = 6.2.0 contains a SQL injection caused by insufficient escaping of 'code' parameter in CouponCodes::find method, letting unauthenticated attackers extract sensitive database information via crafted SQL queries. id: CVE-2026-12800...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

GP Premium <= 2.4.0 - Cross-Site Scripting

The GP Premium plugin for WordPress up to 2.4.0 is vulnerable to reflected XSS via the 'message' parameter in inc/verify.php lines 95-101, where a message passed with slactivation=false is URL-decoded and used unsanitized in addsettingserror, allowing XSS payloads to be reflected in admin notices...

CVE-2018-7844

CVE-2018-7844 Affected Products Schneider Electric Modicon M580 All Versions Schneider Electric Modicon M340 All Versions Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7852

CVE-2018-7852 Affected Products Schneider Electric Modicon M580 Version 2.80 Schneider Electric Modicon M340 Version 3.01 Schneider Electric Modicon Premium Version 3.20 Schneider Electric Modicon Quantum Version 3.60 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2018-7842

CVE-2018-7842 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2026-5076

CVE-2026-5076 - ARMember Password Reset Vulnerability Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-5076 Plugin| ARMember – Membership Plugin & Content Restriction Affected Version| Premium = 7.3.1 Patched Version| 7.3.2 CVSS Score| 9.8 Critical CWE| CWE-640: Weak Password...

CVE-2018-7848

CVE-2018-7848 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...